Atmos Auth
cloudposse/atmos
Authentication and identity management: providers (SSO/SAML/OIDC/GCP/Atmos Pro), identities, keyring, identity chaining, login/exec/shell/console, and github/sts for private GitHub access
Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings.
Install Bash Herestring Newline Secrets
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secrets --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .claude/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .claude/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secretsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secrets --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .agents/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .agents/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .agents/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secrets --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .cursor/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .cursor/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/divinevideo/divine-mobile.git --path .agents/skills/bash-herestring-newline-secrets--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secrets --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .gemini/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .gemini/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secretsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .github/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .github/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .github/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install divinevideo/divine-mobile bash-herestring-newline-secrets --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/divinevideo/divine-mobile.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/.agents/skills/bash-herestring-newline-secrets .opencode/skills/bash-herestring-newline-secrets && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "bash-herestring-newline-secrets" agent skill from https://github.com/divinevideo/divine-mobile/tree/main/.agents/skills/bash-herestring-newline-secrets into .opencode/skills/bash-herestring-newline-secrets/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "bash-herestring-newline-secrets", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
bash-herestring-newline-secrets- GitHub stars
- 265
- Token cost
- ~791 tokens
- SKILL.md length
- 192 words
- Files
- 1
- Skills in repo
- 103
- Repo updated
- First seen
- Licence
- MPL-2.0
At a glance
Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings.
- Password authentication fails with correct password
- SKILL.md covers Problem, Context / Trigger Conditions, Solution and Verification, plus 3 more sections
- Calls gcloud
- Secret created with <<< value syntax
What it does
Bash Herestring Newline Secrets is an agent skill from divinevideo/divine-mobile. Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings. Use when: (1) Password authentication fails with correct password, (2) Secret created with <<< "value" syntax, (3) Error like "password authentication failed" or "invalid token" despite correct value. Bash here-strings (<<<) add a trailing newline that corrupts secrets.
Its SKILL.md is about 790 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering Authentication. It works with Bash and Google Cloud. The licence is MPL-2.0.
When your agent uses it
- Password authentication fails with correct password
- Secret created with <<< value syntax
- Error like password authentication failed
- Invalid token despite correct value
Example prompts
- “syntax, (3) Error like”
- “invalid token”
- “/bash-herestring-newline-secrets”
What it can do on your machine
Read from SKILL.md and the folder at commit 8d5fbf2. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
gcloud
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
gnu.org
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Bash Herestring Newline Secrets loads about 791 tokens when it runs. Until then it costs about 113 tokens; SKILL.md has 192 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from divinevideo/divine-mobile at commit 8d5fbf2, republished under its MPL-2.0 licence (© divinevideo). 192 words, ~791 tokens.
Download SKILL.mdSave it as
.claude/skills/bash-herestring-newline-secrets/SKILL.md (or your agent's skills folder).- name
- bash-herestring-newline-secrets
- description
- Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings. Use when: (1) Password authentication fails with correct password, (2) Secret created with `<<< "value"` syntax, (3) Error like "password authentication failed" or "invalid token" despite correct value. Bash here-strings (`<<<`) add a trailing newline that corrupts secrets.
- author
- Claude Code
- version
- 1.0.0
- date
- 2026-01-31
Bash Here-String Newline in Secrets
Problem
When creating secrets using bash here-strings (<<<), a trailing newline is silently
appended to the value. This causes authentication failures with misleading error messages
that suggest the password/token is wrong when it's actually correct—just with an extra
newline character.
Context / Trigger Conditions
- Secret created with:
gcloud secrets create NAME --data-file=- <<< "value" - Or similar:
echo "value" | gcloud secrets create...(echo adds newline by default) - Error messages like:
- "password authentication failed for user X"
- "invalid token"
- "authentication failed"
- The secret value appears correct when viewed
- Works locally but fails when secret is used
Solution
Wrong (adds newline):
gcloud secrets create my-secret --data-file=- <<< "mypassword"
echo "mypassword" | gcloud secrets create my-secret --data-file=-Correct (no newline):
echo -n "mypassword" | gcloud secrets create my-secret --data-file=-
printf '%s' "mypassword" | gcloud secrets create my-secret --data-file=-To fix an existing secret:
echo -n "correct-value" | gcloud secrets versions add my-secret --data-file=-Verification
Check the secret length to detect trailing newline:
# Get secret and count bytes
gcloud secrets versions access latest --secret=my-secret | wc -c
# Compare to expected length (password length, not password length + 1)Or use xxd to see the actual bytes:
gcloud secrets versions access latest --secret=my-secret | xxd | tail -1
# Look for '0a' (newline) at the endExample
Symptom:
Database connection test failed: password authentication failed for user "crawler"Investigation:
$ gcloud secrets versions access latest --secret=my-db-password
mypassword
$ gcloud secrets versions access latest --secret=my-db-password | wc -c
11 # But password is only 10 characters!Fix:
$ echo -n "mypassword" | gcloud secrets versions add my-db-password --data-file=-
Created version [2] of the secret [my-db-password].Notes
- This affects any system that uses secrets: databases, APIs, tokens, etc.
- The
<<<here-string is a bash feature that ALWAYS adds a newline echoalso adds a newline by default; useecho -norprintf '%s'- Some systems trim whitespace from secrets, but many (like PostgreSQL) don't
- When debugging auth failures, always check for trailing whitespace first
References
- Bash manual on here-strings: https://www.gnu.org/software/bash/manual/bash.html#Here-Strings
© divinevideo, MPL-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in .agents/skills/bash-herestring-newline-secrets of divinevideo/divine-mobile.
Open the folder on GitHubat commit 8d5fbf2
Compare with similar skills
Bash Herestring Newline Secrets next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Bash Herestring Newline Secrets this skilldivinevideo/divine-mobile | 265 | — | ~791 | Automated safety check: Pass | MPL-2.0 | |
| Atmos Authcloudposse/atmos | 1.4k | — | ~4.2k | Automated safety check: Pass | Apache-2.0 | |
| Managing Cloud Identity With Oktamukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~3.1k | Automated safety check: Pass | Apache-2.0 | |
| Iam Auditbriiirussell/cybersecurity-skills | 412 | — | ~3.1k | Automated safety check: Notes | MIT | |
| Dpop Adoptiongoogle/skills | 21k | — | ~2.8k | Automated safety check: Pass | Apache-2.0 | |
| Data Manager API Setupgoogle/skills | 21k | — | ~704 | Automated safety check: Pass | Apache-2.0 |
Similar skills
Managing Cloud Identity With Okta
mukul975/Anthropic-Cybersecurity-Skills
Implement Okta as a centralized cloud identity provider: configure SSO with AWS, Azure, and GCP, deploy phishing-resistant MFA with Okta FastPass, automate user provisioning/deprovisioning, and…
Iam Audit
briiirussell/cybersecurity-skills
Audit, design, and migrate Identity and Access Management — cloud provider IAM (AWS, GCP, Azure), identity providers (Okta, Entra ID / Azure AD, Auth0, Google Workspace), application authorization…
- Official
Dpop Adoption
google/skills
Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform.
- Official
Data Manager API Setup
google/skills
Guides developers through client library installation and authentication setup steps for the Data Manager API.
Clerk Auth
LeoYeAI/openclaw-master-skills
Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP…
More from divinevideo/divine-mobile
All 103 skills in this repoArgocd Externalsecret Namespace Permission
divinevideo/divine-mobile
Fix ArgoCD ExternalSecret deployment failing with "namespace X is not permitted in project Y".
Art Direct
divinevideo/divine-mobile
Art direction for any content — reads text, PDF, Word, HTML, PPT, then proposes 2-3 creative directions with photography style, mood, and visual language.
Async Await Null Race Condition
divinevideo/divine-mobile
Fix "Null check operator used on a null value" errors when an object is set to null during an async await.
AWS V4 Signing Custom Headers Gcs
divinevideo/divine-mobile
Add custom metadata headers (x-amz-meta-) to AWS v4 signed requests for GCS S3-compatible API.
Blossom Content Addressed URL Filtering
divinevideo/divine-mobile
Fix silent video/media processing failures caused by URL extraction code that filters on file extensions (.mp4, .webm, .webp).
Certmanager Dns01 Gke Private Cluster
divinevideo/divine-mobile
Fix cert-manager DNS01 ACME challenges stuck in "pending" state with "DNS record not yet propagated" inside GKE private clusters, even when TXT records exist in Cloudflare DNS.
Related
Works with
Categories
Questions about Bash Herestring Newline Secrets
What does Bash Herestring Newline Secrets do?
Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings. Bash Herestring Newline Secrets is an agent skill from divinevideo/divine-mobile. Fix password/secret authentication failures caused by trailing newlines when creating Google Cloud secrets (or similar) with bash here-strings.
When should I use Bash Herestring Newline Secrets?
Bash Herestring Newline Secrets fits situations like: password authentication fails with correct password; secret created with <<< value syntax; error like password authentication failed; invalid token despite correct value.
How do I install Bash Herestring Newline Secrets in Claude Code?
Run `npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a claude-code`. Or copy the skill folder (.agents/skills/bash-herestring-newline-secrets in divinevideo/divine-mobile) into .claude/skills/bash-herestring-newline-secrets in your project. Claude Code loads it when a task matches its description.
How do I install Bash Herestring Newline Secrets in Codex?
Run `npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a codex`. Or copy the skill folder (.agents/skills/bash-herestring-newline-secrets in divinevideo/divine-mobile) into .agents/skills/bash-herestring-newline-secrets in your project. Codex loads it when a task matches its description.
Can I use Bash Herestring Newline Secrets in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add divinevideo/divine-mobile --skill bash-herestring-newline-secrets -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/bash-herestring-newline-secrets, .gemini/skills/bash-herestring-newline-secrets, .github/skills/bash-herestring-newline-secrets and .opencode/skills/bash-herestring-newline-secrets in your project.
What does Bash Herestring Newline Secrets need to run?
Going by SKILL.md and its folder, Bash Herestring Newline Secrets needs the command-line tools its instructions call (gcloud).
Does Bash Herestring Newline Secrets access the network?
SKILL.md names 1 domain. As links in the text: gnu.org. This is read from the text; nothing was executed.
Is Bash Herestring Newline Secrets safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Bash Herestring Newline Secrets use?
Bash Herestring Newline Secrets is published under the MPL-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Bash Herestring Newline Secrets use?
About 791 tokens (SKILL.md is roughly 3.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Bash Herestring Newline Secrets?
Skills that share tags, products or a category with Bash Herestring Newline Secrets: Atmos Auth (cloudposse/atmos, 1.4k stars), Managing Cloud Identity With Okta (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Iam Audit (briiirussell/cybersecurity-skills, 412 stars) and Dpop Adoption (google/skills, 21k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Bash Herestring Newline Secrets?
divinevideo (a GitHub organization) maintains it in divinevideo/divine-mobile, which has 265 GitHub stars. The repository holds 103 skills in this directory. The repository was last updated on October 7, 2026.
Source: divinevideo/divine-mobile on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.